Openssh chroot

http://www.howtoforge.com/chrooted_ssh_howto_debian_p2

fetch http://chrootssh.sourceforge.net/download/openssh-4.2p1-chroot.tar.gz
tar -xf openssh-4.2p1-chroot.tar.gz
cd openssh-4.2p1-chroot
./configure
make
make install

/usr/local/sbin/sshd -t -f /usr/local/etc/sshd_config

#!/bin/sh
mkdir /home/chroot/
mkdir /home/chroot/home/
cd /home/chroot
mkdir etc
mkdir bin
mkdir lib
mkdir usr
mkdir usr/bin
mkdir dev
mknod dev/null c 1 3
mknod dev/zero c 1 5

APPS="/bin/ls /bin/mkdir /bin/mv /bin/pwd /bin/rm /usr/bin/id /usr/bin/ssh"
for prog in $APPS;  do
        cp $prog ./$prog

        # obtain a list of related libraries
        ldd $prog > /dev/null
        if [ "$?" = 0 ] ; then
                LIBS=`ldd $prog | awk '{ print $3 }'`
                for l in $LIBS; do
                        mkdir -p ./`dirname $l` > /dev/null 2>&1
                        cp $l ./$l
                done
        fi
done

FreeBSD

/usr/ports/security/openssh-portable

[X] OPENSSH_CHROOT  Enable CHROOT support

1. mkdir /home/chroot
2. cd /home/chroot
3. mkdir bin home lib
4. mkidir home/kasutaja
5. cp /bin/csh /home/chroot/bin

1. mkdir libexec
2. cp /libexec/ld-elf.so.1 /usr/home/chroot/libexec/

Juhul kui vaja ,et toimiksid ka programmid naug ssh vaja tekitada vajalikud dev failid ja kaust dev vajalike seadmetega

1. ldd /bin/csh

/bin/csh:

       libncurses.so.7 => /lib/libncurses.so.7 (0x280c6000)
       libcrypt.so.4 => /lib/libcrypt.so.4 (0x28109000)
       libc.so.7 => /lib/libc.so.7 (0x28122000)

2. cp /lib/libncurses.so.7 /home/chroot/lib
3. cp /lib/libcrypt.so.4 /home/chroot/lib
4. cp /lib/libc.so.7 /home/chroot/lib

Installiks saab kasutada ka j2rgnevat skripti

CHROOT="/usr/home/chroot"
APPS="/bin/ls /bin/mkdir /bin/mv /bin/pwd /bin/rm /usr/bin/id /usr/bin/ssh"

for prog in $APPS;  do
        cp $prog $CHROOT/bin

        ldd $prog > /dev/null
        if [ "$?" = 0 ] ; then
                LIBS=`ldd $prog | awk '{ print $3 }'`
                cp $LIBS $CHROOT/lib

        fi
done

Teeme kasutaja nimega kasutaja tema kodukaustaks /home/jail/./home/kasutaja ja shelliks /bin/csh